Inside the I Paid a Bribe Database Breach: How 4,919 Records Were Exposed

In May 2022, the Indian anti-corruption platform I Paid a Bribe suffered a database breach that exposed the personal data of thousands of users who had beleive they were reporting bribery anonymously. The incident affected approximately 4,919 unique accounts and raised immediate concerns about the safety of civic whistleblowers.

Why Attackers Target Civic Platforms Like I Paid a Bribe

Civic reporting platforms are partcularly attractive to threat actors because the data they hold is both personal and politically sensitive. An attacker with access to this database could identify individuals who reported bribery, cross-reference their phone numbers and IP addresses, and target them for harassment or extortion.

What Was Exposed in the I Paid a Bribe Breach

• Email Address
• Phone Number
• Password Hash
• Username
• First Name
• Last Name
• IP Address

Why This Breach Puts Real People at Risk

When a platform serving whistleblowers is breached, the consequences extend beyond typical identity theft. Users who reported bribery cases in India now face the risk that their identities could be reveald to the very individuals or organizations they reported. Combined with MD5-hashed passwords that can be cracked quickly, attackers may gain access to connected accounts across services.

How a Database Breach Works

A database breach occurs when an unauthorized party gains access to a structured data store, often through SQL injection, misconfigured access controls, or compromised credentials. Once inside, attackers can export entire tables of user records. In this case, the I Paid a Bribe database was accessed and its contents circulated on dark web forums and Telegram channels beginning in May 2022.

Check If Your Data Was Exposed

HEROIC's DarkWatch monitors over 400 billion records sourced from breaches, stealer logs, and dark web markets. If your email, phone number, or username appeared in the I Paid a Bribe breach or thousands of others, HEROIC will alert you. Search now to find out if your data is already in the wrong hands.